Missing Authorization vulnerability in Sliced Invoices

CVE-2024-30517

What is CVE-2024-30517?

A Missing Authorization vulnerability exists in the Sliced Invoices plugin for WordPress, which may allow unauthorized access to sensitive functions. This flaw is present in all versions from n/a up to 3.9.2, potentially exposing critical data to unauthorized users and leading to unauthorized transactions or information disclosure. Organizations using affected versions should promptly implement security measures or updates to mitigate the associated risks.

References